Jiaying Song d5fa84385a python3-requests: fix CVE-2024-47081 ...

Requests is a HTTP library. Due to a URL parsing issue, Requests
releases prior to 2.32.4 may leak .netrc credentials to third parties
for specific maliciously-crafted URLs. Users should upgrade to version
2.32.4 to receive a fix. For older versions of Requests, use of the
.netrc file can be disabled with `trust_env=False` on one's Requests
Session.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-47081

Upstream patch:
https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef

(From OE-Core rev: 37d746033710509ffabc244e0130d20fd81d9673)

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-06-20 08:06:29 -07:00

..

CVE-2023-32681.patch

…

CVE-2024-35195.patch

python3-requests: fix CVE-2024-35195

2024-12-16 05:58:03 -08:00

CVE-2024-47081.patch

python3-requests: fix CVE-2024-47081

2025-06-20 08:06:29 -07:00